This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json) Hash identifier: 4QEPWi+a7XB6DdDiLWmYGtMjtM7Q0dWYBe8IbmCW50g= Subject key identifier: 6B:6B:49:81:35:2E:57:E0:F8:A6:DF:10:52:9E:F8:83:77:45:C5:1A Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Certificate serial: 019B360E0FB1F63E23FF08D6006AB0713A08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 10:00:49 +0000 Manifest this update: Fri 19 Dec 2025 10:00:49 +0000 Manifest next update: Sat 20 Dec 2025 10:00:49 +0000 Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=) 2: EyJebdgN_fWVOlchPG_q8jVIsTI.roa (hash: pQpIAFQ+yM9up9856kTHZ8z3CJ8nyC04WtkTgvAhl0g=) 3: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=) 4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: lqU6JAeezAg24P6mKxr/Va3ixyadDCvqr6cyvLx1MAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:0f:b1:f6:3e:23:ff:08:d6:00:6a:b0:71:3a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Validity Not Before: Dec 19 10:00:49 2025 GMT Not After : Dec 20 10:00:49 2025 GMT Subject: CN=6b6b4981352e57e0f8a6df10529ef8837745c51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:ca:71:71:15:42:68:ae:90:9a:25:83:8d: e0:ec:32:32:99:76:c3:5a:85:08:53:61:6c:43:71: a0:fe:c0:0b:7b:1a:63:49:54:fc:de:f4:aa:ce:b6: 57:1e:5c:91:13:8e:43:1e:cb:c7:45:9a:60:32:0f: 91:dc:55:71:d7:37:ce:a2:be:b8:7f:ea:47:a0:6c: f5:63:9e:01:8c:3a:c6:ef:85:07:86:00:d5:97:78: 79:fb:7b:80:10:dc:82:bb:c5:1b:36:20:b8:d8:ef: 3d:56:e0:11:0f:34:ba:0c:c5:6f:78:b2:1b:1e:80: 66:64:06:b1:a5:98:37:ea:05:0f:06:a2:11:a9:ca: ef:ee:65:d3:fb:59:b2:31:e5:c5:37:15:3c:39:11: 43:78:27:c1:4f:ee:a9:dd:60:9c:1b:58:c0:ac:28: 34:52:ce:bc:4c:7e:63:ab:33:b9:a6:53:ce:b8:b7: 82:5f:cc:36:0b:69:34:72:58:9b:5a:3d:52:53:27: 5a:52:7d:4a:33:1b:ae:c7:d5:bb:2f:3d:71:c1:19: 75:f7:96:75:2d:12:6b:e6:c2:05:51:32:a6:8c:c2: 06:81:36:a2:ac:7e:87:0d:aa:9d:d2:bd:e4:e8:cf: 75:6c:e8:f7:db:dc:5a:4d:2e:d0:1e:0c:2f:35:95: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6B:49:81:35:2E:57:E0:F8:A6:DF:10:52:9E:F8:83:77:45:C5:1A X509v3 Authority Key Identifier: keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:37:e6:ca:60:a4:66:78:6b:81:c4:4f:df:e0:e7:8e:55:e7: 89:93:83:d2:f3:96:07:e2:fc:d2:63:3a:0a:54:b0:e6:17:be: 14:c9:f0:5a:c7:05:70:26:b3:cf:47:a7:59:f4:89:64:48:19: e8:8f:82:d8:8e:86:d9:cf:29:fe:49:ba:f8:2d:ab:91:85:73: 6a:ef:aa:7a:fe:9f:d1:f7:46:25:85:a1:b7:30:8f:34:42:c1: cc:e9:9a:d3:1c:4c:8e:ac:1f:26:f0:7d:21:fd:cb:3e:1e:37: 6d:f0:a2:03:33:0b:dd:7f:9b:2f:6d:ad:d2:c1:7d:59:b1:47: ef:d7:25:52:36:3a:73:5c:ff:f9:e3:68:0b:39:6c:0e:f7:4b: 82:1a:e6:d0:a5:9b:a1:07:ac:07:b6:70:fd:da:96:ad:40:26: fa:57:a4:c9:9b:50:4c:be:c2:74:40:5f:fb:05:6a:ff:1f:67: a8:39:b5:bc:4e:8a:f1:f2:f7:9c:aa:62:d7:70:bc:a2:3d:fa: aa:de:a0:ec:0c:db:c0:c5:02:3c:60:97:b0:d7:7e:34:35:92: f0:12:0c:5f:a7:a2:6e:96:fe:c2:e8:06:61:40:66:95:5b:61: b1:29:ed:7e:68:c9:ed:75:86:c4:f9:88:b3:a7:f7:24:75:2d: 91:85:e8:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dg+x9j4j/wjWAGqwcToIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy NDkxYzUwHhcNMjUxMjE5MTAwMDQ5WhcNMjUxMjIwMTAwMDQ5WjAzMTEwLwYDVQQD Eyg2YjZiNDk4MTM1MmU1N2UwZjhhNmRmMTA1MjllZjg4Mzc3NDVjNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gjKcXEVQmiukJolg43g7DIymXbD WoUIU2FsQ3Gg/sALexpjSVT83vSqzrZXHlyRE45DHsvHRZpgMg+R3FVx1zfOor64 f+pHoGz1Y54BjDrG74UHhgDVl3h5+3uAENyCu8UbNiC42O89VuARDzS6DMVveLIb HoBmZAaxpZg36gUPBqIRqcrv7mXT+1myMeXFNxU8ORFDeCfBT+6p3WCcG1jArCg0 Us68TH5jqzO5plPOuLeCX8w2C2k0clibWj1SUydaUn1KMxuux9W7Lz1xwRl195Z1 LRJr5sIFUTKmjMIGgTairH6HDaqd0r3k6M91bOj329xaTS7QHgwvNZW7kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtrSYE1Llfg+KbfEFKe+IN3RcUaMB8GA1UdIwQY MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczfmymCk ZnhrgcRP3+DnjlXniZOD0vOWB+L80mM6ClSw5he+FMnwWscFcCazz0enWfSJZEgZ 6I+C2I6G2c8p/km6+C2rkYVzau+qev6f0fdGJYWhtzCPNELBzOma0xxMjqwfJvB9 If3LPh43bfCiAzML3X+bL22t0sF9WbFH79clUjY6c1z/+eNoCzlsDvdLghrm0KWb oQesB7Zw/dqWrUAm+lekyZtQTL7CdEBf+wVq/x9nqDm1vE6K8fL3nKpi13C8oj36 qt6g7AzbwMUCPGCXsNd+NDWS8BIMX6eibpb+wugGYUBmlVthsSntfmjJ7XWGxPmI s6f3JHUtkYXoAw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:16 2025 by rpki-client